From 8412d20e28a4e2ef4c382a7aeabca77b0aebe341 Mon Sep 17 00:00:00 2001 From: Steven Silvester Date: Fri, 11 Jul 2025 16:46:46 -0500 Subject: [PATCH] PYTHON-5430 Use the zizmor action (#341) --- .github/workflows/zizmor.yml | 17 +++-------------- 1 file changed, 3 insertions(+), 14 deletions(-) diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index e0dc0fb2..1d58c0d5 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -1,4 +1,4 @@ -name: GitHub Actions Security Analysis with zizmor +name: GitHub Actions Security Analysis with zizmor 🌈 on: push: @@ -17,16 +17,5 @@ jobs: uses: actions/checkout@v4 with: persist-credentials: false - - name: Setup Rust - uses: actions-rust-lang/setup-rust-toolchain@9d7e65c320fdb52dcd45ffaa68deb6c02c8754d9 # v1 - - name: Get zizmor - run: cargo install zizmor - - name: Run zizmor - run: zizmor --format sarif . > results.sarif - env: - GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} - - name: Upload SARIF file - uses: github/codeql-action/upload-sarif@28deaeda66b76a05916b6923827895f2b14ab387 # v3 - with: - sarif_file: results.sarif - category: zizmor + - name: Run zizmor 🌈 + uses: zizmorcore/zizmor-action@1c7106082dbc1753372e3924b7da1b9417011a21